$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/63702a98-5f77-3380-8f53-d98e5b334bd3.roa File: 63702a98-5f77-3380-8f53-d98e5b334bd3.roa (raw, json) Hash identifier: r1EHDPn7xHmsTHBwoMfFsA64evJp6ZcVaMlA3IuM36M= Subject key identifier: 7F:A4:00:04:10:FC:E8:C4:98:96:F3:D3:CE:5E:C9:57:FC:F0:84:0A Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584F49734EC1684EB0B6F8DD1080 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/63702a98-5f77-3380-8f53-d98e5b334bd3.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 97.64.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:4e:c1:68:4e:b0:b6:f8:dd:10:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=e86f70f3-a71a-48d5-8113-bec0af89bf0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:03:05:22:c4:57:31:d6:d1:a9:75:50:77:fd: ad:c0:35:d7:fe:47:1f:0a:a5:12:3b:e3:6b:75:89: 95:ba:52:51:d0:65:d4:28:d1:e5:88:2b:90:d0:85: ec:d6:5e:54:67:21:82:a9:93:88:cd:2e:ff:ec:6b: 05:52:58:8f:90:b4:66:85:34:02:35:41:b0:1e:77: ef:34:b2:bd:72:ba:e5:2e:d2:30:41:58:86:36:17: 28:ca:ba:60:2e:85:a5:1a:26:52:f9:47:cd:54:26: 0f:d3:08:e3:9d:ed:c4:a0:d0:bd:06:19:3c:2e:5a: df:aa:ed:18:a5:14:d2:78:71:38:96:a1:67:02:0b: b9:9b:20:24:29:51:2c:fc:d6:e7:d8:b6:9c:19:9f: ce:83:ef:4c:fc:1d:f3:7b:12:34:f8:6b:21:ab:a1: 4c:a4:07:3c:8f:22:6f:cc:ae:4f:71:b4:6f:66:5a: 0b:ed:56:55:3c:3c:d8:3c:17:c1:a7:19:e2:a4:62: 0e:17:68:a5:01:6a:22:6f:79:df:ad:9a:93:a2:fb: fe:fe:94:b5:45:2c:64:e8:8d:31:20:17:ca:dc:e9: 80:b5:ea:21:cc:b0:b6:e7:92:86:e4:49:ab:29:13: 0c:c3:03:ed:cc:7f:7a:f1:f5:fb:5a:c2:68:58:91: d6:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:A4:00:04:10:FC:E8:C4:98:96:F3:D3:CE:5E:C9:57:FC:F0:84:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/63702a98-5f77-3380-8f53-d98e5b334bd3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 97.64.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:14:16:30:cd:ad:a1:e7:27:8f:34:9e:16:27:b2:3e:80:58: 1e:8d:6c:86:3c:d9:e6:7e:11:69:d7:0a:18:0d:41:98:e0:95: d9:55:c2:1a:8c:66:7b:ad:4c:3e:a3:bc:f3:bd:7f:29:46:51: 62:22:fa:1c:41:c6:14:b3:e7:b0:eb:3e:90:49:06:d3:25:ba: 6f:23:99:1f:f8:66:a0:3b:79:cc:78:f5:6d:f1:02:7d:1c:52: 44:d3:44:99:e1:01:ed:c9:a8:c7:54:47:9d:75:58:19:63:d2: 95:37:cc:35:c1:0c:ac:d9:82:79:95:0c:ab:86:a2:3e:af:0b: 66:60:a3:76:66:6e:24:0b:b6:08:8a:6f:4b:7a:10:db:dd:42: fe:b3:af:47:ec:2f:ea:4e:31:7e:08:5d:6d:62:45:bd:07:f8: 44:f3:5c:ac:a0:d2:e1:45:f7:0c:b9:45:6a:1d:b8:53:29:85: 46:a4:87:88:fd:90:a3:78:29:11:69:aa:c2:08:87:6c:dc:4c: 69:60:c4:38:4a:f3:4b:c7:4b:c4:d4:4c:3c:69:94:6c:77:c3: 4e:b1:7c:dd:52:ff:43:92:1c:93:d7:00:b1:75:b9:b4:5a:2b: 84:79:91:1b:f2:b6:f7:71:df:54:91:6f:8c:dc:9b:d9:b0:18: 46:25:3f:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc07BaE6wtvjdEIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZTg2ZjcwZjMtYTcxYS00OGQ1LTgxMTMtYmVjMGFmODliZjBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgAMFIsRXMdbRqXVQd/2twDXX/kcfCqUSO+Nr dYmVulJR0GXUKNHliCuQ0IXs1l5UZyGCqZOIzS7/7GsFUliPkLRmhTQCNUGwHnfv NLK9crrlLtIwQViGNhcoyrpgLoWlGiZS+UfNVCYP0wjjne3EoNC9Bhk8Llrfqu0Y pRTSeHE4lqFnAgu5myAkKVEs/Nbn2LacGZ/Og+9M/B3zexI0+Gshq6FMpAc8jyJv zK5PcbRvZloL7VZVPDzYPBfBpxnipGIOF2ilAWoib3nfrZqTovv+/pS1RSxk6I0x IBfK3OmAteohzLC255KG5EmrKRMMwwPtzH968fX7WsJoWJHWgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH+kAAQQ/OjEmJbz085eyVf88IQKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNjM3MDJhOTgtNWY3Ny0z MzgwLThmNTMtZDk4ZTViMzM0YmQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYUD/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB0UFjDNraHnJ480nhYnsj6AWB6NbIY82eZ+EWnXChgNQZjgldlVwhqM ZnutTD6jvPO9fylGUWIi+hxBxhSz57DrPpBJBtMlum8jmR/4ZqA7ecx49W3xAn0c UkTTRJnhAe3JqMdUR511WBlj0pU3zDXBDKzZgnmVDKuGoj6vC2Zgo3ZmbiQLtgiK b0t6ENvdQv6zr0fsL+pOMX4IXW1iRb0H+ETzXKyg0uFF9wy5RWoduFMphUakh4j9 kKN4KRFpqsIIh2zcTGlgxDhK80vHS8TUTDxplGx3w06xfN1S/0OSHJPXALF1ubRa K4R5kRvytvdx31SRb4zcm9mwGEYlP8o= -----END CERTIFICATE-----Generated at Sun Sep 27 12:38:37 2026 by rpki-client